Linux

68218 readers

407 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago

MODERATORS

nooter692@lemmy.ml

AgreeableLandscape@lemmy.ml

MarcellusDrum@lemmy.ml

cypherpunks@lemmy.ml

cyclohexane@lemmy.ml

d3Xt3r@lemmy.nz

Have we been running insecure software since the arrival of AI? (lemmy.ml)

submitted 1 week ago by trilobite@lemmy.ml to c/linux@lemmy.ml

11 comments fedilink hide all child comments

I do about a monthly update of my Debian machines. Today I did the usual monthly update and noticed loads of packages uploading from the "security" branch. I've had the impression (just an impression) that more and more packages are being updated from security over the past many months. Trixie has been out for a while now and I would have thought that less and less updates should be coming from security. Has anyone had this sensation and if so has anyone linked this to AI finding more holes in OSS that would have normally been found by human scrutiny? Has there been any official research into this? And if this is true, does it mean that we have been running insecure software all along? Or is there is there a risk that AI start filing patches that actually make it less secure because software maintainers are not being rigorous in verifying who is submitting the patch? AI must be changing the paradigm of software development more than any other area of our lives and I can't still work out if in a better way or not.

you are viewing a single comment's thread
view the rest of the comments

[–] technocrit@lemmy.dbzer0.com 4 points 1 week ago* (last edited 1 week ago)

Have we been running insecure software since the arrival of AI?

No, "AI" doesn't exist and software has been insecure since it was invented.

Has anyone had this sensation and if so has anyone linked this to AI finding more holes in OSS that would have normally been found by human scrutiny?

A major point of automated security checks is that humans didn't find these vulnerabilities and might never have found them without computational aids.

does it mean that we have been running insecure software all along?

Yes, 10000%. Security is a complete illusion even with automated checks. If an organization has enough time and money (eg. state surveillance), they will hack whatever they want to hack.